Add support for proxy networks & cleanup playbook vars

Enable installing zsh config repo standalone, i.e. without Ansible,
invoke the `install.zsh` script instead.

playbooks/1password.yaml

@@ -1,4 +1,6 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - 1password

playbooks/Linux.yaml

@@ -2,15 +2,14 @@
 - import_playbook: LinuxCLI.yaml
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: firefox
     - role: kitty
     - role: guake
     - role: cider
+    - role: ulauncher
     - role: gnome-shell
       when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
     - role: xremap

playbooks/LinuxCLI.yaml

@@ -1,14 +1,14 @@
 ---
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: rpmfusion
       when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: gdb
     - role: podman

playbooks/UnixCLI.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: sudo
       when: ansible_user_id != "root"

playbooks/UnixGUI.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: flatpak
       when: ansible_os_family != "Darwin"

playbooks/WSL.yaml

@@ -1,9 +1,7 @@
 ---
 - import_playbook: LinuxCLI.yaml
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: wsl

playbooks/Windows.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: windows
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: python
     - role: git

playbooks/macOS.yaml

@@ -1,14 +1,14 @@
 ---
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars:
-    github_auth_headers: >-
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: mas
 

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -16,6 +16,7 @@
   get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: set compatible architecture
   when: ansible_machine == 'x86_64'

roles/1password/tasks/Windows.yaml

@@ -16,6 +16,7 @@
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer
   when: not app_stat.stat.exists
@@ -68,6 +69,7 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/bat/tasks/deb.yaml

@@ -51,6 +51,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/firefox/tasks/Ubuntu.yaml

@@ -17,6 +17,7 @@
   get_url:
     url: https://packages.mozilla.org/apt/repo-signing-key.gpg
     dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
 
 - name: add mozilla apt repo
   become: true

roles/fonts/tasks/Linux.yaml

@@ -37,6 +37,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
 
 - name: install Caskaydia Cove Nerd Font
   when: needs_installed

roles/gh/tasks/Debian.yaml

@@ -15,6 +15,7 @@
     url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
     dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
     mode: 0644
+  environment: '{{proxy_environment}}'
 
 - name: add apt repository list
   become: true

roles/gh/tasks/RedHat.yaml

@@ -4,6 +4,7 @@
   get_url:
     url: https://cli.github.com/packages/rpm/gh-cli.repo
     dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
 
 - name: install dnf package
   become: true

roles/git/tasks/Windows-installer.yaml

@@ -19,6 +19,7 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/gitea/tasks/Linux.yaml

@@ -40,6 +40,7 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{tea_package_exe}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: install package
   when: install_required

roles/glab/tasks/Debian.yaml

@@ -48,6 +48,7 @@
   get_url:
     url: '{{asset.url}}'
     dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: glab_version is not defined or glab_version != latest_version

roles/guake/tasks/main.yaml

@@ -3,6 +3,7 @@
     that: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
 
 - name: install package
+  become: true
   package:
     name: guake
     state: latest

roles/jp/tasks/Darwin.yaml

@@ -40,3 +40,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -50,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/jp'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/llvm/tasks/Ubuntu.yaml

@@ -57,6 +57,7 @@
   get_url:
     url: https://apt.llvm.org/llvm-snapshot.gpg.key
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true

roles/neovim/tasks/Debian.yaml

@@ -17,7 +17,6 @@
     state: latest
 
 - name: install python provider pip package
-  become: true
   pip:
     name: pynvim
     state: latest
@@ -80,6 +79,7 @@
   get_url:
     url: '{{asset[0].browser_download_url}}'
     dest: '{{package_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: extract package archive
   when: install_required

roles/nodejs/tasks/Debian.yaml

@@ -13,6 +13,7 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
+  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/python/tasks/Unix.yaml

@@ -1,7 +1,13 @@
 ---
-- name: install config repo
-  git:
-    repo: git@code.infektor.net:config/python.git
+- name: stat old config repo
+  stat:
+    path: ~/.config/python/.git
+  register: config_python_git
+
+- name: remove old config repo
+  when: config_python_git.stat.exists
+  file:
+    state: absent
     dest: ~/.config/python
 
 - name: create config directories
@@ -13,34 +19,45 @@
     - ~/.config/ipython/profile_default
     - ~/.config/pip
 
-# Ensure that pip.conf exists before ever installing pip packages since
-# Debian has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip
-# install --user` unless configured otherwise.
-- name: create symbolic links
+- name: stat pip.conf
+  stat:
+    path: ~/.config/pip/pip.conf
+  register: pip_conf
+
+- name: remove pip.conf if its a symbolic link
+  when: pip_conf.stat.islnk
   file:
-    state: link
-    src: '{{item.src}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - src: ~/.config/python/flake8
-      dest: ~/.config/flake8
-    - src: ~/.config/python/pylintrc
-      dest: ~/.pylintrc
-    - src: ~/.config/python/ipython_config.py
-      dest: ~/.config/ipython/profile_default/ipython_config.py
-    - src: ~/.config/python/pip.conf
-      dest: ~/.config/pip/pip.conf
+    state: absent
+    path: ~/.config/pip/pip.conf
+
+# Ensure that pip.conf exists before ever installing pip packages since Debian
+# has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip install
+# --user` unless configured otherwise.
+- name: create user pip.conf from template
+  template:
+    src: pip.conf.j2
+    dest: ~/.config/pip/pip.conf
+
+# TODO: Also configure pip to disable `EXTERNALLY-MANAGED` globally?
+
+- name: stat old ipython_config.py
+  stat:
+    path: ~/.config/ipython/profile_default/ipython_config.py
+  register: ipython_config_py
+
+- name: remove ipython_conifg.py if its a symbolic link
+  when: ipython_config_py.stat.islnk
+  file:
+    state: absent
+    path: ~/.config/ipython/profile_default/ipython_config.py
+
+- name: create ipython config from template
+  template:
+    src: ipython_config.py
+    dest: ~/.config/ipython/profile_default/ipython_config.py
 
 - name: install pip packages
   pip:
     name: '{{python_pip_packages}}'
     state: latest
     extra_args: --user
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.config/ipython/profile_default
-    - ~/.config/pip

roles/python/templates/ipython_config.py

@@ -0,0 +1 @@
+c.TerminalInteractiveShell.editing_mode = 'vi'

roles/python/templates/pip.conf.j2

@@ -0,0 +1,8 @@
+[global]
+break-system-packages = true
+{% if ansible_env.http_proxy is defined %}
+proxy = {{ ansible_env.http_proxy }}
+{% endif %}
+
+[list]
+format=columns

roles/system-info/tasks/Darwin.yaml

@@ -1,4 +1,25 @@
 ---
-# TODO: create a launchd module that handles user mode services
-# cp $script_dir/system-info.plist ~/Library/LaunchAgents/system-info.plist
-# launchctl load -w ~/Library/LaunchAgents/system-info.plist
+- name: get list of running launchd services
+  command: launchctl list
+  register: launchd_running_services
+  changed_when: false
+
+- name: determine if system-info is currently running
+  set_fact:
+    system_info_debug: true
+    system_info_plist_path: '{{ansible_env.HOME}}/Library/LaunchAgents/system-info.plist'
+    system_info_running: "{{'system-info' in launchd_running_services.stdout}}"
+
+- name: install system-info launchd plist
+  template:
+    src: system-info.plist.j2
+    dest: '{{system_info_plist_path}}'
+  register: system_info_plist
+
+- name: unload running system-info launchd service
+  when: system_info_plist.changed and system_info_running
+  command: 'launchctl unload -w {{system_info_plist_path}}'
+
+- name: load system-info launchd service
+  when: system_info_plist.changed or not system_info_running
+  command: 'launchctl load -w {{system_info_plist_path}}'

roles/system-info/templates/system-info.plist.j2

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>system-info</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+      <key>PATH</key>
+      <string>/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
+    </dict>
+    <key>Program</key>
+    <string>{{ansible_env.HOME}}/.config/tmux/system-info/system-info-macOS.sh</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+  </dict>
+</plist>

roles/tmux/tasks/Darwin.yaml

@@ -18,6 +18,7 @@
   get_url:
     url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
     dest: ~/tmux-256color
+  environment: '{{proxy_environment}}'
 
 - name: compile terminal info
   when: terminfo_exists.rc == 1

roles/tmux/tasks/main.yaml

@@ -5,6 +5,9 @@
   git:
     repo: git@code.infektor.net:config/tmux.git
     dest: ~/.config/tmux
-    version: master
+    version: main
 
-- include_tasks: ~/.config/tmux/tasks.yaml
+- name: run install script
+  command: ~/.config/tmux/install.sh
+  register: tmux_install
+  changed_when: "'changed' in tmux_install.stdout"

roles/ulauncher/tasks/Debian.yaml

@@ -0,0 +1,32 @@
+---
+- name: install keyring
+  when: ansible_distribution == 'Debian'
+  become: true
+  get_url:
+    url: '{{ulauncher_keyring_url}}'
+    dest: '{{ulauncher_keyring_path}}'
+    mode: '0644'
+    force: true
+  environment: '{{proxy_environment}}'
+
+- name: add apt sources list
+  when: ansible_distribution == 'Debian'
+  become: true
+  copy:
+    content: >-
+      deb [signed-by={{ulauncher_keyring_path}}]
+      http://ppa.launchpad.net/agornostal/ulauncher/ubuntu
+      {{ansible_distribution_release}} main"
+    dest: '{{ulauncher_apt_sources_list_path}}'
+
+- name: add ppa repository
+  when: ansible_distribution != 'Debian'
+  become: true
+  apt_repository:
+    repo: ppa:agornostal/ulauncher
+
+- name: install apt package
+  become: true
+  apt:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/ulauncher/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+ulauncher_keyring_url: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x59ebde772980c381ca13fa59faf1020699503176
+ulauncher_keyring_path: /usr/share/keyrings/ulauncher-archive-keyring.gpg
+ulauncher_apt_list_path: /etc/apt/sources.list.d/ulauncher.list

roles/webcatalog/tasks/Linux.yaml

@@ -28,6 +28,7 @@
     url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
     dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: create directories
   file:

roles/xremap/tasks/main.yaml

@@ -63,6 +63,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{install_dir}}/xremap.zip'
+  environment: '{{proxy_environment}}'
 
 - name: extract release archive
   when: needs_installed

roles/yq/tasks/Debian.yaml

@@ -36,3 +36,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{yq_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/yq/tasks/RedHat.yaml

@@ -50,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/yq'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/zsh/tasks/main.yaml

@@ -5,82 +5,12 @@
   git:
     repo: git@code.infektor.net:config/zsh.git
     dest: ~/.config/zsh
-    version: master
+    version: main
 
-- name: clone plugin repos
-  git:
-    repo: '{{item.repo}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - repo: https://github.com/zsh-users/zsh-autosuggestions.git
-      dest: ~/.config/zsh/zsh-autosuggestions
-    - repo: https://github.com/zsh-users/zsh-history-substring-search.git
-      dest: ~/.config/zsh/zsh-history-substring-search
-    - repo: https://github.com/zsh-users/zsh-syntax-highlighting.git
-      dest: ~/.config/zsh/zsh-syntax-highlighting
-    - repo: https://github.com/zsh-users/zsh-completions.git
-      dest: ~/.config/zsh/zsh-completions
-  loop_control:
-    label: '{{item.repo | regex_search("https://github.com/(.*)\.git$", "\1")}}'
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.local/bin
-    - ~/.local/share/zsh/site-functions
-
-- name: create symbolic links
-  file:
-    state: link
-    src: '{{item.src}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - src: ~/.config/zsh/zlogin
-      dest: ~/.zlogin
-    - src: ~/.config/zsh/zlogout
-      dest: ~/.zlogout
-    - src: ~/.config/zsh/zprofile
-      dest: ~/.zprofile
-    - src: ~/.config/zsh/zshenv
-      dest: ~/.zshenv
-    - src: ~/.config/zsh/zshrc
-      dest: ~/.zshrc
-    - src: ~/.config/zsh/prompt_fresh_setup
-      dest: ~/.local/share/zsh/site-functions/prompt_fresh_setup
-    - src: ~/.config/zsh/build/_build-dir
-      dest: ~/.local/share/zsh/site-functions/_build-dir
-    - src: ~/.config/zsh/sandbox/_sandbox
-      dest: ~/.local/share/zsh/site-functions/_sandbox
-    - src: ~/.config/zsh/layout/_layout
-      dest: ~/.local/share/zsh/site-functions/_layout
-    - src: ~/.config/zsh/notes/_note
-      dest: ~/.local/share/zsh/site-functions/_note
-    - src: ~/.config/zsh/cmake-uninstall
-      dest: ~/.local/bin/cmake-uninstall
-    - src: ~/.config/zsh/$
-      dest: ~/.local/bin/$
-    - src: ~/.config/zsh/url/url
-      dest: ~/.local/bin/url
-    - src: ~/.config/zsh/url/_url
-      dest: ~/.local/share/zsh/site-functions/_url
-
-  loop_control:
-    label: '{{item.dest}}'
-
-- name: list commands with available completions
-  command:
-    zsh {{ansible_env.HOME}}/.config/zsh/list-commands-with-available-completions.zsh
-  changed_when: false
-  register: completion_commands
-
-- name: install completions for available commands
-  file:
-    state: link
-    src: '~/.config/zsh/zsh-completions/src/_{{item}}'
-    dest: '~/.local/share/zsh/site-functions/_{{item}}'
-  with_items: '{{completion_commands.stdout}}'
+- name: run install script
+  command: ~/.config/zsh/install.zsh
+  register: zsh_install
+  changed_when: "'changed' in zsh_install.stdout"
 
 - name: get absolute path
   shell: command -v zsh